spryker/shipment-type-storage-extension

Release historycaution

The package has had no registry release in about 2 years and 11 months, with zero releases in the last 12 months. Recent repository commits provide some compensation, but the published release cadence remains a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap, not evidence of an unsafe release by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or dangerous triggers. Two of four action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.